CVE-2020-1856

🗓️ 17 Feb 2020 20:27:50Reported by huaweiType

Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2020-1856	17 Feb 202020:27	–	cvelist
EUVD	EUVD-2020-12682	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Information leakage Vulnerability in Some Huawei Products	5 Feb 202000:00	–	huawei
NVD	CVE-2020-1856	17 Feb 202021:15	–	nvd
OSV	CVE-2020-1856	17 Feb 202021:15	–	osv
Prion	Information disclosure	17 Feb 202021:15	–	prion
RedhatCVE	CVE-2020-1856	22 May 202517:40	–	redhatcve

NVD

Vulners

Node

huawei ngfw_module_firmwareMatchv500r001c30

huawei ngfw_module_firmwareMatchv500r001c60

huawei ngfw_module_firmwareMatchv500r005c00

AND

huawei ngfw_moduleMatch-

Node

huawei nip6300_firmwareMatchv500r001c30

huawei nip6300_firmwareMatchv500r001c60

huawei nip6300_firmwareMatchv500r005c00

AND

huawei nip6300Match-

Node

huawei nip6600_firmwareMatchv500r001c30

huawei nip6600_firmwareMatchv500r001c60

huawei nip6600_firmwareMatchv500r005c00

AND

huawei nip6600Match-

Node

huawei secospace_usg6500_firmwareMatchv500r001c30

huawei secospace_usg6500_firmwareMatchv500r001c60

huawei secospace_usg6500_firmwareMatchv500r005c00

AND

huawei secospace_usg6500Match-

Node

huawei secospace_usg6600_firmwareMatchv500r001c30

huawei secospace_usg6600_firmwareMatchv500r001c60

huawei secospace_usg6600_firmwareMatchv500r005c00

AND

huawei secospace_usg6600Match-

Node

huawei usg9500_firmwareMatchv500r001c30

huawei usg9500_firmwareMatchv500r001c60

huawei usg9500_firmwareMatchv500r005c00

AND

huawei usg9500Match-

[
  {
    "product": "NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, USG9500",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "V500R001C30"
      },
      {
        "status": "affected",
        "version": "V500R001C60"
      },
      {
        "status": "affected",
        "version": "V500R005C00"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-firewall-en

21 Nov 2024 05:11Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.00187